| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2015-5122
Adobe Flash Player Use-After-Free Vulnerability |
Adobe · Flash Player | Apr 13, 2022 | May 4, 2022 | 87.0% | — |
| CVE-2015-5123
Adobe Flash Player Use-After-Free Vulnerability |
Adobe · Flash Player | Apr 13, 2022 | May 4, 2022 | 18.8% | — |
| CVE-2018-20753 Ransomware
Kaseya VSA Remote Code Execution Vulnerability |
Kaseya · Virtual System/Server Administrator (VSA) | Apr 13, 2022 | May 4, 2022 | 29.6% | — |
| CVE-2018-7602 Ransomware
Drupal Core Remote Code Execution Vulnerability |
Drupal · Core | Apr 13, 2022 | May 4, 2022 | 99.2% | — |
| CVE-2022-24521 Ransomware
Microsoft Windows CLFS Driver Privilege Escalation Vulnerability |
Microsoft · Windows | Apr 13, 2022 | May 4, 2022 | 7.1% | — |
| CVE-2017-11317
Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability |
Telerik · User Interface (UI) for ASP.NET AJAX | Apr 11, 2022 | May 2, 2022 | 84.2% | — |
| CVE-2020-2509
QNAP Network-Attached Storage (NAS) Command Injection Vulnerability |
QNAP · QNAP Network-Attached Storage (NAS) | Apr 11, 2022 | May 2, 2022 | 34.0% | — |
| CVE-2021-22600
Linux Kernel Privilege Escalation Vulnerability |
Linux · Kernel | Apr 11, 2022 | May 2, 2022 | 6.6% | — |
| CVE-2021-27852
Checkbox Survey Deserialization of Untrusted Data Vulnerability |
Checkbox · Checkbox Survey | Apr 11, 2022 | May 2, 2022 | 30.3% | — |
| CVE-2021-39793
Google Pixel Out-of-Bounds Write Vulnerability |
Google · Pixel | Apr 11, 2022 | May 2, 2022 | 0.7% | — |
| CVE-2021-42278 Ransomware
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability |
Microsoft · Active Directory | Apr 11, 2022 | May 2, 2022 | 73.3% | — |
| CVE-2021-42287 Ransomware
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability |
Microsoft · Active Directory | Apr 11, 2022 | May 2, 2022 | 77.2% | — |
| CVE-2022-23176
WatchGuard Firebox and XTM Privilege Escalation Vulnerability |
WatchGuard · Firebox and XTM | Apr 11, 2022 | May 2, 2022 | 10.9% | — |
| CVE-2017-0148 Ransomware
Microsoft SMBv1 Server Remote Code Execution Vulnerability |
Microsoft · SMBv1 server | Apr 6, 2022 | Apr 27, 2022 | 99.4% | — |
| CVE-2021-31166
Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability |
Microsoft · HTTP Protocol Stack | Apr 6, 2022 | Apr 27, 2022 | 99.9% | — |
| CVE-2021-3156
Sudo Heap-Based Buffer Overflow Vulnerability |
Sudo · Sudo | Apr 6, 2022 | Apr 27, 2022 | 100.0% | — |
| CVE-2021-45382
D-Link Multiple Routers Remote Code Execution Vulnerability |
D-Link · Multiple Routers | Apr 4, 2022 | Apr 25, 2022 | 97.8% | — |
| CVE-2022-22674
Apple macOS Out-of-Bounds Read Vulnerability |
Apple · macOS | Apr 4, 2022 | Apr 25, 2022 | 1.1% | — |
| CVE-2022-22675
Apple macOS Out-of-Bounds Write Vulnerability |
Apple · macOS | Apr 4, 2022 | Apr 25, 2022 | 12.5% | — |
| CVE-2022-22965
Spring Framework JDK 9+ Remote Code Execution Vulnerability |
VMware · Spring Framework | Apr 4, 2022 | Apr 25, 2022 | 99.6% | — |
| CVE-2018-10561
Dasan GPON Routers Authentication Bypass Vulnerability |
Dasan · Gigabit Passive Optical Network (GPON) Routers | Mar 31, 2022 | Apr 21, 2022 | 92.8% | — |
| CVE-2018-10562 Ransomware
Dasan GPON Routers Command Injection Vulnerability |
Dasan · Gigabit Passive Optical Network (GPON) Routers | Mar 31, 2022 | Apr 21, 2022 | 99.9% | — |
| CVE-2021-21551
Dell dbutil Driver Insufficient Access Control Vulnerability |
Dell · dbutil Driver | Mar 31, 2022 | Apr 21, 2022 | 79.6% | — |
| CVE-2021-28799 Ransomware
QNAP NAS Improper Authorization Vulnerability |
QNAP · Network Attached Storage (NAS) | Mar 31, 2022 | Apr 21, 2022 | 78.2% | — |
| CVE-2021-34484
Microsoft Windows User Profile Service Privilege Escalation Vulnerability |
Microsoft · Windows | Mar 31, 2022 | Apr 21, 2022 | 21.8% | — |
| CVE-2022-1040
Sophos Firewall Authentication Bypass Vulnerability |
Sophos · Firewall | Mar 31, 2022 | Apr 21, 2022 | 99.8% | — |
| CVE-2022-26871
Trend Micro Apex Central Arbitrary File Upload Vulnerability |
Trend Micro · Apex Central | Mar 31, 2022 | Apr 21, 2022 | 19.5% | — |
| CVE-2010-4398
Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability |
Microsoft · Windows | Mar 28, 2022 | Apr 21, 2022 | 8.7% | — |
| CVE-2011-2005
Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnera… |
Microsoft · Ancillary Function Driver (afd.sys) | Mar 28, 2022 | Apr 18, 2022 | 31.8% | — |
| CVE-2012-0518
Oracle Fusion Middleware Unspecified Vulnerability |
Oracle · Fusion Middleware | Mar 28, 2022 | Apr 18, 2022 | 4.7% | — |
| CVE-2012-2034
Adobe Flash Player Memory Corruption Vulnerability |
Adobe · Flash Player | Mar 28, 2022 | Apr 18, 2022 | 7.7% | — |
| CVE-2012-2539
Microsoft Word Remote Code Execution Vulnerability |
Microsoft · Word | Mar 28, 2022 | Apr 18, 2022 | 53.0% | — |
| CVE-2012-5076
Oracle Java SE Sandbox Bypass Vulnerability |
Oracle · Java SE | Mar 28, 2022 | Apr 18, 2022 | 91.2% | — |
| CVE-2013-1690
Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability |
Mozilla · Firefox and Thunderbird | Mar 28, 2022 | Apr 18, 2022 | 69.0% | — |
| CVE-2013-2465 Ransomware
Oracle Java SE Unspecified Vulnerability |
Oracle · Java SE | Mar 28, 2022 | Apr 18, 2022 | 98.8% | — |
| CVE-2013-2551 Ransomware
Microsoft Internet Explorer Use-After-Free Vulnerability |
Microsoft · Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | 74.1% | — |
| CVE-2013-2729
Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability |
Adobe · Reader and Acrobat | Mar 28, 2022 | Apr 18, 2022 | 66.6% | — |
| CVE-2013-3660
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Mar 28, 2022 | Apr 18, 2022 | 39.3% | — |
| CVE-2015-1770
Microsoft Office Uninitialized Memory Use Vulnerability |
Microsoft · Office | Mar 28, 2022 | Apr 18, 2022 | 35.0% | — |
| CVE-2015-2419
Microsoft Internet Explorer Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | 53.0% | — |
| CVE-2015-2426
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability |
Microsoft · Windows | Mar 28, 2022 | Apr 18, 2022 | 86.6% | — |
| CVE-2016-0040
Microsoft Windows Kernel Privilege Escalation Vulnerability |
Microsoft · Windows | Mar 28, 2022 | Apr 18, 2022 | 24.3% | — |
| CVE-2016-0151 Ransomware
Microsoft Windows CSRSS Security Feature Bypass Vulnerability |
Microsoft · Client-Server Run-time Subsystem (CSRSS) | Mar 28, 2022 | Apr 18, 2022 | 62.8% | — |
| CVE-2016-0189 Ransomware
Microsoft Internet Explorer Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | 94.1% | — |
| CVE-2016-7200
Microsoft Edge Memory Corruption Vulnerability |
Microsoft · Edge | Mar 28, 2022 | Apr 18, 2022 | 82.8% | — |
| CVE-2016-7201
Microsoft Edge Memory Corruption Vulnerability |
Microsoft · Edge | Mar 28, 2022 | Apr 18, 2022 | 80.0% | — |
| CVE-2017-0037
Microsoft Edge and Internet Explorer Type Confusion Vulnerability |
Microsoft · Edge and Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | 80.4% | — |
| CVE-2017-0059
Microsoft Internet Explorer Information Disclosure Vulnerability |
Microsoft · Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | 62.0% | — |
| CVE-2017-0213 Ransomware
Microsoft Windows Privilege Escalation Vulnerability |
Microsoft · Windows | Mar 28, 2022 | Apr 18, 2022 | 84.3% | — |
| CVE-2018-8405 Ransomware
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability |
Microsoft · DirectX Graphics Kernel (DXGKRNL) | Mar 28, 2022 | Apr 18, 2022 | 3.4% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.